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It is known that a message can be transmitted safely against any wiretapper via a noisy channel 

$_j ■ 

without a secret key if the coding rate is less than the so-called secrecy capacity Cs, which is usually 
smaller than the channel capacity C. In order to remove the loss C — Cs, we propose a multiplex coding 
scheme with plural independent messages. In this paper, it is shown that the proposed multiplex coding 
scheme can attain the channel capacity as the total rate of the plural messages and the perfect secrecy 
for each message. The coding theorem is proved by extending Hayashi's proof, in which the coding of 
the channel resolvability is applied to wiretap channels. 
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I. Introduction 

When Alice sends a message to Bob via a public noisy channel, Eve may wiretap the message. But, 
since the main channel from Alice to Bob has usually a different characteristic from the wiretap channel 
from Alice to Eve, we can devise a code such that the perfect secrecy against Eve can be attained without 
any secret key. The maximum attainable coding rate of such codes is called the secrecy capacity Cs, 
which is generally smaller than the channel capacity C of the main channel. 

The coding problem for the wiretap channels was first studied by Wyner [2]. Although the main and 
wiretap channels can be considered as a kind of broadcast channel [1], Wyner proved the coding theorem 
for the case of the so-called degraded broadcast channel. For more general broadcast channels, Csiszar and 
Korner [3] proved that the secrecy capacity Cs is given by Cs = maxj^ x ^ y Z ^[I(X; Y) — I(X; Z)], 
where X is the input, and Y and Z are the output of the main and wiretap channels, respectively. X 
is an auxiliary random variable that makes a Markov chain X — > X — > (Y, Z). In order to achieve the 
perfect secrecy with a positive coding rate, the channels must satisfy that I(X; Y) > I(X; Z) for some 
X, i.e, the main channel must be less noisy than the wiretap channel in this sense. But, even in the case 
that the main channel is more noisy than the wiretap channel, Maurer [4] devised a protocol which can 
attain the perfect secrecy if a public noiseless channel can be used. 

In the above studies, channels are assumed to be stationary. On the contrary, the information-spectrum 
methods [5] have been developed recently, and many kinds of coding problems have been proved for the 
so-called general sources and general channels, which might be neither Ergodic nor stationary. As one 
of them, Han and Verdu [6] studied the so-called channel resolvability problem, in which we want 
to approximate the output probability distribution of a noisy channel for a given input probability 
distribution by encoding a random number. The minimum rate of the random number necessary to 
attain the approximation is called the channel resolvability, and they developed the theory of the channel 
resolvability for general channels. On the other hand, for quantum channels, Devetak [8] introduced a 
stochastic encoder to realize a non-distinguishable probability distribution for any message at the output 
of the wiretap channel. Based on these background, Hayashi [9] considered the coding problem of 
general wiretap channels in the framework of the stochastic encoders and the channel resolvability, and 
established the proving method for the coding theorem of general wiretap channels. 

It is well known from the coding theorems proved in the previous studies that messages cannot be 
transmitted at any rate larger than the secrecy capacity Cs if we want to attain the perfect secrecy. Since 
Cs is generally less than the channel capacity C, we must loss C — Cs in exchange for the secrecy. 
But, in this paper, we will devise a multiplex coding of plural independent messages to remove the loss, 
and we will show, according to Hayashi's proving method, that the channel capacity C can be attained 
as the total rate of the plural messages and each message can be protected with the perfect secrecy. 

In section 2, we define several technical terms, which are used in the information-spectrum method. 
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The multiplex coding scheme of plural messages is proposed in section 3. The main theorem is also 
shown in section 3 although it is proved in section 4. Finally, the case of stationary memoryless wiretap 
channels is treated in section 5. In this paper, both input and output alphabets of channels are assumed 
to be discrete. 

II. Preliminaries 

According to the information-spectrum method [5], we represent a general random process, which 
might be neither Ergodic nor stationary, as 

X = {X"}~ =1) (1) 

where X n = (Xi,X 2 , ■ ■ ■ ,X n ) and each X t take values in discrete alphabet X n and X, respectively, 
and X n is the Cartesian product of X. 

For two general random process X and Y, the spectral sup-mutual information rate and the spectral 
inf-mutual information rate are defined as follows. 
Definition 1 

Spectral sup-mutual information rate : 

T(Px, P Y| x) = mf [a | Jim Pr {I log ^(^P > = °} ® 
Spectral inf-mutual information rate : 

{( 1 P (Y n \X n ) 1 1 
* 1 1™ p r { n log TV) < " r / 

In the case that X and Y are i.i.d. processes with probability distribution Px,y, both of the spectral 
sup- and inf-mutual information rates coincide with the ordinary mutual information I(X; Y). 

A general channel W with an input alphabet X and an output alphabet y is defined as W = 
{W 71 }^-!, where W n — W n (-\-) is an arbitrary conditional probability distribution that satisfies 

£ W n (y n \x n ) = 1 (3) 

for each x n e X n and each n = 1, 2, • • • . For the input process X = {I"}™ =1 and the output process 
Y = {Y n } c £' =l of the general channel W, W n satisfies for any n > that 

Px»,y»(z n ,y n ) - P^(ar")W"(y"|^), (4) 
fV»|x»(y n |s n ) - W(» n k n ), (5) 

= P X nW n (y n ). (6) 
Note that Py^ is also represented as Px^W n because Py n is determined by Px* and W™. 
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For simplicity, we represent the alphabets of a general channel as X — > y when the input and 
output alphabets are X and y, respectively. Let U and W be general channels with alphabets X — > X 
and X — > y, respectively. Then, the cascade channel UW with alphabets X — > y is defined by 

UW = {{UW) n }™ =1 , where 

(UW) n (y n \x n ) = U(x n \x n )W(y n \x n ). (7) 

Now we consider the channel resolvability problem. Let V = {V n }^ =1 be a given general channel 
with alphabets X -> Z, an input X = {A"™}£° =1 , and the corresponding output Z = {Z™}^. Then, 
we want to approximate the output Z by inputting X = {X n }^ =1 into the channel, where X n is 
generated by encoding a uniform random number K over an alphabet K, = {1, 2, • • • , M„}. For the 
output Z = {Z n }^ =1 of the input X, we evaluate the performance of the approximation between Z and 
Z by the variational distance d(Z n ,Z n ) = ||P Z » - Pg„||i = £ 2 „ \P Z n(z n ) - P~ zn {z n )\. 

Definition 2 

For a given channel V = {V n }^ =1 with alphabets X — > ^, a rate i? is called achievable for an input 
X if there exists a sequence of codes <p n : X n — (p n {K) that satisfies 

lim d(Z n ,Z n ) =0, (8) 

n^oo 

lim sup - log M n < R, (9) 

where if is the uniform random number over JC = {1,2, ••• ,M n }, and P^ n (z n ) — P^ n V n (z n ). 
Furthermore, the channel resolvability for the input X, denoted by S*x(V), is defined as follows. 

Sx(V) = inf{R | R is achievable for the input X of the channel V} (10) 

Then, the next theorem is proved by Han-Verdu [6]. 

Theorem 1 For any general channel V and any input P x > it holds that 

S X (V) <T(Px,V). (11) 

Furthermore, it is shown in [7] that if V is a full-rank channel, i.e. V is a stationary memoryless 
channel such that x e X, are independent as a set of vector, then the channel resolvability 

Sx(V) satisfies that for any input X, 

5x(V)=7(P x ,V). (12) 



February 1, 2008 



DRAFT 



4 



III. Multiplex coding 



In this section, we consider a multiplex coding for wiretap channels. Assume that Alice sends 
messages to Bob via a main channel W with alphabets X — > y and Eve eavesdrops the messages 
via a wiretap channel V with alphabets X — > Z. W and V are general channels in the sense of the 
information-spectral method. The input of both channels is Px, and the outputs of W and V are Py 
and Pz, respectively. 

Assume that Alice sends T independent messages K\, K 2 , . ■ . , Kt to Bob by a multiplex coding. 
Each K u t = 1, 2, • • • ,T, takes values in K t = {1, 2, • • • , M t }, and satisfies that Pr{K t = k} = 1/M t 
for all k € JCt- The aim of the multiplex coding is to attain the following performance. 

(A) Every K t must be transmitted to Bob within an arbitrarily small error probability. 

(B) The perfect secrecy against Eve must be attained for each K t , t = 1, 2, • • • , T, individually. 
Note that the above (B) does not require the perfect secrecy of the entire (Ki,K 2 , . . . , Kt), which is 
usually required in the ordinary (i.e. non-multiplex) coding for wiretap channels. In the case of (B), some 
information about the combination of (Ki,K 2 , ■ ■ . , Kt) may leak out. But, since K t , t = 1, 2, • • ■ ,T, 
are assumed to be mutually independent, the combination has no meaning, and hence the individual 
perfect secrecy of K t is reasonable. 

The tuple (Ki,K 2 , ■ . . , Kt) is encoded by an encoder ip n to a codeword X n , which is sent to Bob 
via the main channel W n . In this paper, we consider the case that stochastic encoders can be used in 
addition to the case that only deterministic encoders can be used. For each t, Bob decodes K t by a 
decoder ip^ from the channel output Y n . Let V\ be the decoding region of k G K t . Then for each t, 
T>\, T>1, • • • , V l Mt are mutually disjoint, and K t = k is decoded if Y n e V\. In the case that K t ^ K t 
or Y n g Uj^Djj., a decoding error occurs for the t-th message K t . 

We represent the above code by C n {{M\, ■ ■ ■ , Mt}, <^ n , ip n ), or C„ for short, and evaluate the 
performance in the following three viewpoints, 
(a) Coding rate of each message K t : 



where V\ is the complement set of V\, and Q\{x n ) is the probability distribution of input X n 
generated by the encoder ip n for a message K t — k. Note that Q\{x n ) depends on other 
messages K#,t' ^ t (and some random numbers in the case of stochastic encoder). The 
probability distribution of the outputs Y n and Z n of the main and wiretap channels for the 

message K t = k are given by Q t k W n (y n ) and Q t k V n (z n ), respectively. 



-log M 4 



n 



(b) Average decoding error probability of each message K t : 




(13) 
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(c) Security measures : 



1 1 1 Mt 

J*(C„) = -I(K t ;Z n ) = *£D(QiV n \\P Z n) 



n 
1 1 



k=l 



M t M t 



k=l 



(14) 



fe=i 



Mi 



M t 



<{C n )= „ ,J E E IIQ^-Wlli 



M t (Af t - 1) 

j— iyE E Ei^' yn ^")-^ y "( z ")i 



fe=i fe'=i(fc'^fc) 



M t (M t - 1) 



(15) 



fc=l fc' = l(fc'^fc) z" 

Note that if I^(C n ) is sufficiently small, then the message if t and the output Z" are almost 
independent, and hence Eve cannot obtain any information about K t from Z n . On the other 
hand, d^(C n ) is the security measure based on the variational distance. If d^(C n ) is sufficiently 
small, then the output probability distribution Q\V n is almost the same as Q\,V n for any 
k' 6 /Cf. This also means that Eve cannot obtain any information about K t from Z n . 
Now we define the achievable rates R t , t = 1, 2, • • • , T for the multiplex coding as follows. 
Definition 3 

If there exists a sequence of code C n that satisfies ( I16> -( I19> . then a rate-tuple (R\, fta, ■ • • , -Rt) is called 
achievable for channels (W, V) in the sense of the security measure 1^(C„). Furthermore, if there exists 
a sequence of code C n that satisfies — dl 8i and i2Q\ . then a rate-tuple (i?i,i?2, • ■ ■ , Rt) is called 
achievable for channels (W, V) in the sense of the security measure d* t (C„). 



liminf - log f TT M t > ) > ftotai, 

n— >oo n \ - LJ - / 

\i'=l / 

ilogfnM, 

\t'=l / 



lim sup 

n — >oo 

lim 4(C„) = 0, 

n — »oo 

lim /^(C„) = 0, 

n — ► oo 

lim <4(C n ) = 0, 

n — >oo 

where the total rate ftotai is defined as 



- log M t 
n 



< R 



total 



Rt, t — 1, 2, • • • ,T, 



1,2, • 
t = 1,2,' 
t=l,2,- 



T 

? 1 



T 



T 
7 x i 



ft 



■total 



Eft 



(16) 

(17) 

(18) 
(19) 
(20) 

(21) 



Remark 1 Note from ( IT6l and fPTl that if (Ri,R 2 , ■ • • , ft-r) is achievable, then it satisfies 



liminf- log M* >R t ,t= 1,2, •■• ,T 

n— *-oo 71 



(22) 
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because 



Rt < ^total - um sup 



ilogf T\M t , j -ilogM, 
_n ^1 = 1 y n 

< lim inf i log | TT M t / ) + lim inf - - log ( TT M v \ + - log 
ilog ( n M t ) I log ( fl ^ ] +^logAf« 



< lim inf 



A// 



= lim inf — log M t . 

n— ►oc 77 

Therefore, if (i? l7 i? 2 , • • • , -Rt) is achievable, each message K t can be transmitted securely with at least 
the rate R t . However, for any rate-tuple {R\, R2, ■•• , Rt), there exists a sequence of code {C n } that 
does not satisfy both equalities of d!6i and 1221 . Such a case occurs if {C n } satisfies 



I / T \ T 1 

lim inf - log TT M v > lim inf - logM t < 

n— >oo 77 \ / ^ — ' n— »oo 77 

\t'=l / t' = l 



(23) 



In order to avoid this inconvenience, d!7i is used instead of J22> . 



Remark 2 Although (fT9t or i20t ensure the perfect secrecy of each message K t , some information 
about the combination of {K\, K2, ■ ■ ■ , Kt) leaks out. Since Ki, K2, ■ ■ ■ , Kt are mutual independent, 
the leaked information has no meaning. However, if an enemy gets a message K t by a method other than 
the output Z of the wiretap channel, the enemy may also get some information about other messages 
K t i ,t' t. If Alice and Bob want to prevent the possibility of such attack, they must use the ordinary, 
i.e. non-multiplex, coding for wiretap channels. 
Definition 4 

Let 7^ ct (W, V, T), Kj ct (W, V, T), 7?4 (W, V, T), and 7^ to (W, V, T) be the closures of achievable 
rate-tuples (Ri, R2, • ■ ■ , Rt) for the main and wiretap channels (W, V). The subscript "det" represents 
the case that only deterministic encoders can be used while "sto" means that stochastic encoders including 
deterministic encoders can be used. Furthermore, the subscripts "I" and "ci" stand for the cases that the 
security is measured by I^(C n ) and d^(C„), respectively. 



From the above definition, it holds obviously that for any (W, V) and any T, 

7^ et (W,V,T) C ft s 7 to (W,V ; T), 
TZ d dct (W,V,T) C Ki (W,V,T). 



(24) 
(25) 



Since the multiplex coding of plural messages is treated, we usually assume in this paper that T > 2. 
But, note that the case of T = 1 corresponds to the ordinary coding for wiretap channels. 

In order to evaluate the above achievable rate regions, we first define two regions 7£i(W, V, T) and 
1Z 2 (W,V,T) as follows. 
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Definition 5 



1Z\ (W, V, T) = i?2, • • • , Rt) I There exists an input probability distribution Px 

that satisfies (|27j and d28l>. (26) 

i?total < I(Px,W) (27) 
Rtotai-Rt > I(Px,V), t = l,2,-.-,T. (28) 

Definition 6 

72-2 (W, V, T) = {(i?i, i?2, • • • , -Rt) I There exists an input probability distribution P x and 

a test channel U with alphabets X — > «Y that satisfy 
(gU) and (ED}- (29) 

Ptotal < I(P X ,UW) (30) 
Rtom-Rt > 7(P X ,UV), * = 1,2,.-.,T, (31) 

where «Y is an arbitrary finite alphabet, and UW with «Y — > ^ and UV with ^ — > Z are the cascade 
channels of (U and W) and (U and V), respectively. 

For the above rate regions, the following theorems hold. 

Theorem 2 For any given W, V, and T > 2, ^ et (W,V,T) and Kj et (W,V,T) satisfy 

7^ et (W,V,T) D ^(W.V.T), (32) 

7ei t (W,V,T) D fti(W,V,T), (33) 
respectively. Furthermore, if V satisfies (I12> . then it holds that 

7el t (W, V, T) = 7£i(W, V, T). (34) 

Theorem 3 For any given W, V, and T > 2, 7^ (W,V,T) and 7^ to (W, V,T) satisfy 

^ to (W,V,T) D ft 2 (W,V,T), (35) 
K d sto (W,V,T) D ft 2 (W,V,T), (36) 

respectively. Furthermore, if V satisfies (I12> . then it holds that 

7Z s d to (W,V,T)=ft 2 (W,V,T). (37) 
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Remark 3 From (ED, and ((3TJ, each R t , t = 1, 2, • • • , T in Theorems and 01 must satisfy 
that 



At < I(Px,W)-/(P x ,V), 
#t < J(i^,UW)-7(Px,UV), 



(38) 
(39) 



respectively. 



Remark 4 We note from [11, Theorem 5 and the proof of Lemma 5] that in the case of T — 1, the 
secrecy capacity Cs is given by 



C s = _sup J(P X , UW) 

P x ,U:J(P x ,UV)=0 

= sup [J(^,UW)-7(^,UV)] 



P^.U 



(40) 



in both cases of the security measures P^(C n ) and d^(C n ). On the other hand, it holds from Definition 
©that for T = 1,R 1 < J(P X , UW), = 7(P X , UV). Hence, it holds for T = 1 that 



^ t0 (W,V,l)=74 (W,V,l)=^ 2 (W ) V,l) = [0,C S ]. 



(41) 



Remark 5 Let P x be the input probability distribution that can attain the channel capacity C = 
sup Px /(Px, W), i.e. £(P X , W) = C. Then, from Theorem [2] and using this P x in J26b . a rate-tuple 
(Pi, R2, ■ ■ ■ , Rt) is achievable if it satisfies 



Ptotal — C, 
Ptotal-Pt > 7(fSc,V). 

Note that in the case of Pi = P 2 = • • ■ = Rt, ( ED holds for T satisfying 



(42) 
(43) 



T > 



I(P X ,W)-I(P X ,V) 



> 



c_ 



(44) 



Therefore, the channel capacity can be attained as the total rate of the multiplex coding with an appropriate 
T, and each message Kt can be individually protected perfectly against Eve. 



IV. Proofs 

We first prove Theorem |2] 
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A. Direct Part 

The direct part, i.e. ( I32t and j33> . can be proved in the same way as [11, the proof of Theorem 3], 
which uses the coding scheme introduced in [8]. 

In a code C„, the total number of codewords is given by Il^i-^t- We generate every codeword 
independently with probability Px n - Then, let xj? k2 ... kT be the codeword that corresponds to messages 
Kt — kt, t = 1, 2, • • ■ , T. The decoding regions T>k x ,k 2 ,— ,k T f° r messages Kt = kt, t = 1, 2, ■ • • , T, 
are defined by 

'Dk 1 ,k 2 ,-,k T =Axk u k 2 ,-,k T )\ (J ^(zj^,...,^), (45) 

(fejjfej,"' ,k' T )^{kx ,k 2 ,■ ■ ■ ,k T ) 

where A(x n ) is defined for a given real number a, which is determined later, as follows. 

f , W n (v n \x n ) 1 

A(x n ) = ly n e y n | p ^ yn) ' > T n \ (46) 

We now evaluate the performance for the above random code ensemble. Note that for each message 
K t in the above code, all the other messages can be considered as a dummy message to keep the message 
K t secret from Eve. On the other hand, for the case of non-multiplex coding, Hayashi [11, Section IV] 
proved the coding theorem for wiretap channels by using the random code with message size M and 
the dummy size L. For each t, letting 

L, s ,47) 

M t 

the above random code ensemble coincides with Hayashi's random code ensemble with the message size 
M — M t and the dummy size L = L t , and therefore the following Lemma holds from [11, the proof of 
Theorem 3]. 

Lemma 1 The above random code ensemble satisfies for any real numbers a and b that for t = 

1,2, ••• ,T, 




E<f„(C„) < 2 2Pr -log ' ' ' > M + , — (49) 



1 2^ n 
E/*(C n ) < - V (6 n ) + S n ■ log \Z\ + —, (50) 
n L t 

where E represents the expectation over the random code ensemble, i](x) = —a; log a; and 6 n is defined 
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It holds from Markov's inequality [1] that for each t, 

Pr { (4(C n ) < 3T • E4(C„)) C } < ± (52) 
Pr{«(C„) < 3T-E4(C„)) C } < -L (53) 

Pr{(4(C n ) < 3T.E/*(C„)) C } < -L (54) 

where (C/) c stands for the complement event of . Hence, among the random code ensemble, there exists 
a code satisfying all of <!55i-(l57i. 

4(C«) <3T-Ee^(C„), t = l,2,-»,T (55) 
<(C„)<3T-E4(C n ), t=l,2,...,T (56) 
/*(C„)<3T-EJ<(C„), *=1,2,...,T (57) 
Now we show by selecting parameters M t , a, and b adequately that for an arbitrarily given Px and 
7 > 0, a rate-tuple (R\, R2, ■•• , Rt) is achievable if it satisfies that 

-Rtotai < I(Px,W)- 7 (58) 
i?totai ~Rt > T(P x ,V)+7, < = 1,2,---,T. (59) 
Setting M t = 2 nRt , we have that 

T 

Y[ Mt = 2 nRt °^ 
t=i 

< 2™^( Px ' w )-t), (60) 

> 2 n ( 7 ( Px - v )+7). (61) 
By setting a = J(P X , W) - 7/2, and b = 7(Px, V) + 7/2, we obtain that 

(n Mt ^' 2 ~ a " - 2_ ™ 7/2 (62) 

nbn 

— < 2~ ni/2 . (63) 
Lt 

Hence, from Bsl-dgOl l|55}-<|57}, and Definition [T] it holds that 



lim 4(C„) = 0, (64) 

n — >-oo 

lim 4(C„) = 0, (65) 

n— »oo 

lim 7*(C n ) = 0, (66) 

n — *oo 

which means that the rate-tuple (Pi, P2, • ' ' j ^t) is achievable if it satisfies d58i and ( I59l l. Finally, since 
the above argument holds for any 7 > 0, any rate-tuple in IZi is achievable in both senses of the security 
measures d l n (Cn) and 7*(C„). 
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B. Converse Part 

We will show that if the wiretap channel V satisfies (I12> for any Px> then the following relation 



holds. 



Kt et (W,V,T) cnx(W,V,T). 



(67) 



Let (i?i,i?2, • • • > Rt) € ^-det(W, V,T). Then, there exists a sequence of code {C n } that satisfies 
dl6i— A18I. and j20l >. Hence the code C n satisfies that for any 7 > and any sufficiently large n, 



iiogfn^') ^ r 
iiogfn^'V 1 

n \ / n 

\t'=i / 



total — 7 



logM t < fltotai-^t+7, t = l,2,---,T. 



(68) 



(69) 



Now let X n be the uniform random variable that takes values in the set of codewords 
{ x k x k 2 ■■■ k T }k t eic t ,t=i.--- ,t- Then, it holds from Verdu-Han's Lemma [5, Lemma 3.2.2] that for any 

7 > 0, 



r--^ f 1, W(Y n \X n ) 1 

]T4(C„) > Pr^-log 



t=i 



n P Y n{Y n ) 



Pl^-tog SB < fltotal - 2 7 ^ - < " 



(70) 



n Pi^(r™) 

Hence we conclude from (|2jl and Jl 8I > that i?totai must satisfy ( I27> . 

Next we prove d28i by considering the following variational distance for each t. Let X^ be the random 
variable that is the same as X n except that K t is fixed as K t — k. Then, noting Px* — icr- Ylk=i ^x n ' 

t k 

we have that 

M t 



\Px-V n - P^h = 



1 

Mt 



— V PsrnV n - P^„V n 
1 k' = l 
Mt 

J2( P x t V n -P x ^V n ) 



k' = l 



1 



Mt 



fc'=l(fe'^fe) 



< 



1 M t 

— Y \\P^V n -P^V n \\i 



fe'=i(fc'/fc) 



- M t - 1 ^ x k> x k 1 



(71) 

• ; ' • .. 

fc' = l(fc'^fc) 

Since the average of ||Px™^" — Px™V n \\i f° r fc = 1 to A/ t tends to zero asymptotically from (I20> and 
( 17 1> . it must hold that for some k, 



lim \\PxnV n -P stn V n \\ 1 = 



(72) 
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Noting that XJ} is a random number which uniformly distributes over the set with L t = (Ylt'—i M t >) / M t 
elements, Sx(V) must satisfy from Definition [5] and J69I that for any 7 > 0, 

5 X ( V) < lim sup - log L t < i? to tal -Rt + 1> (73) 

This means that if O holds for any Px, then d28i also holds. 

In the sequel, any {R U R 2 , ■ • ■ , Rt) € Tl d Act {W , v . T ) is included in 72-i(W, V, T). 

In the case of Theorem we can use a test channel U with alphabets X — > in the encoder (y9„ 
because stochastic encoders can be used. Hence, Theorem [3] can be proved in the same way as Theorem 
12 by considering the cascade channels (UW, UV) instead of (W, V). 

V. Stationary Memoryless Wiretap Channels 

In this section, we consider the case that channels W and V are stationary memoryless channels 
with transition probability distribution W and V, respectively. In this case, it holds that the spectral 
sup- and inf-mutual information rates are equal to the ordinary mutual information. Hence the following 
corollary holds from Theorems [2] and [5] 
Corollary 1 

If the channels W and V are stationary memoryless channels given by W and V, respectively, it holds 
for T > 2 that 

^ et (W,V,T)D^(W,^T), (74) 

Ki to (W, V, T) D TZ* 2 (W, V, T), (75) 

where n\{W,V,T) and Kl(W,V,T) are defined in Definition |7] 
Definition 7 



TZ-i (W, V, T) = {(i?i, i?2, • ■ • , Rt) I There exists an input probability distribution 



that satisfies (ZEJ and f79t>. (76) 

TZ^iW, V, T) = {(Ri, i?2, • • • , Rt) \ There exists an input probability distribution Px and 

a test channel U with alphabets X — > X that satisfy 

{8(5J and EJ}. (77) 

fltotai < I(Px,W) (78) 

RtoM-Rt > I(Px,V), t = l,2,.-.,r. (79) 

Btotal < /(Pjf.CW) (80) 

Rtotti-Rt > I(P X ,UV), t = l,2,..- ,T, (81) 
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where X is an auxiliary random variable over a finite alphabet X, 1 and UW with X — > y and 
UV with <Y — > Z are the cascade channels of (U and WO and (U and V), respectively. The mutual 
informations are defined as I(P X , W) = I(X; Y), I(P X ,V) = I(X; Z), I(P X ,UW) = I(X; Y), and 
I(P X , UV) = I(X; Z) where the random variables make a Markov chain X — » X — > (Y, Z). 

We note that <5„ defined in ( 15 1> goes to zero with an exponential order of n in the case of stationary 
memoryless channels. Hence, even if we use 

P n (C) = I(K t ;Z n ) (82) 

instead of Z^(C n ) defined in J 1 4i as a security measure, we can easily prove that the code shown in 
section IV-A also satisfies 

lim Z(C n ) = 0. (83) 

n — >oc 

Therefore, Corollary ^ holds for /^(C) similarly. 

Furthermore, it is well known, e.g. refer [1], that the divergence D(P\\\P2) and the variational 
distance ||Pi — P2II1 satisfies 

D(Pi\\P 2 )>^\\Pi-P2\\l (84) 

Hence, if a rate-tuple (i?i, R2, ■ ■ ■ , Rt) is achievable for J^(C„), then the rate-tuple is also achievable 
for <(C„). This means that ^ ct (W, V,T) C U d det (W,V,T) and 7^ to (W,V,T) C ^ s d to (W, V,T). 
By combining Theorems |2] |3] and the above facts, we obtain the following corollary. 

Corollary 2 

If the channels W and V are stationary memoryless channels given by W and V, respectively, it holds 
that 

■R d det (W,V,T) D^L(W,V,T) DKl(W,V,T) for T > 2 (85) 
TZ d sto (W 7 V, T) D Tll (W, V, T) D TZ* 2 {W, V, T) for T > 2. (86) 
Furthermore, if the wiretap channel V is full-rank, then the following equalities also hold. 

Kj ct (W, V, T) = ftL (W, V, T) = TZ*(W, V, T) for T > 2 (87) 
^ s d to (W, V, T) = 7e s ? to (W, V, T) = TZ* 2 (W, V, T) for T > 2 (88) 

Remark 6 In the case of T — 1, we note from Remark@]that for stochastic encoders, all the achievable 
rate regions for three security measures coincide with IZ^W, V, 1), and the maximum R\ s TZ^iW, V, 1) 
is equal to the secrecy capacity C5 determined by Csiszai and Korner [3]. Hence, it holds that 

^ to (W,V,l) =7^ to (W,V,l) =kL(W,V,1) =K* 2 (W,V,1) = [0,C S ], (89) 
l \X\, the cardinality of X, can be bounded by \X\ < \X\ + 1. Refer [3] for more details. 
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where Cs is given by 

C s = _ max [I(X;Y) - I(X;Z)}. (90) 

X^X^(Y,Z) 
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